This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: dm1RD2JGlR9NhicS8qbt1kb9CNy8K5/rQCsk+67VVjM= Subject key identifier: AD:FC:86:10:7B:3E:A7:B2:40:EE:1A:6E:3F:85:0F:DB:C9:7B:A4:B7 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 0541 Signing time: Mon 22 Dec 2025 23:26:43 +0000 Manifest this update: Mon 22 Dec 2025 23:26:42 +0000 Manifest next update: Mon 29 Dec 2025 23:26:42 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: dN/EonlYXaklLx/9idSfuRExZRRzqD4pbYwfulC7WQs=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Dec 22 23:26:42 2025 GMT Not After : Dec 29 23:26:42 2025 GMT Subject: CN=6949d3b3-70a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:5d:b7:0d:90:f7:eb:db:e1:72:45:fc:32: 27:65:7c:07:15:59:5c:9d:10:3d:87:52:8f:ee:07: 3e:55:b3:21:2f:27:53:ae:e1:54:ae:6a:44:7a:8a: e0:81:7d:4e:e5:e5:31:78:92:5b:0c:ab:b1:6c:4f: 92:0f:af:a3:1f:bf:f7:3b:90:65:73:44:e1:e9:e2: c4:1d:9e:9c:73:27:bb:cd:88:4b:15:cd:ff:bd:0f: df:57:37:7f:05:19:69:12:a0:c8:9b:d4:86:fa:af: 14:9b:03:36:c6:9c:2e:40:52:db:92:e7:f1:b7:50: 6a:95:2f:47:1b:8a:73:49:11:fa:d2:5a:ac:74:e4: 94:ed:a0:88:62:6a:d4:b1:c0:be:a4:b5:bc:e2:56: df:12:3a:ed:ed:61:25:22:fe:c8:c3:7c:0c:d2:37: 71:9e:49:e5:a4:8a:20:ed:55:b2:8c:b0:64:1d:46: d4:fc:a6:bc:bb:d2:91:42:4c:1e:98:51:e0:00:4d: 78:21:45:bb:11:02:79:2d:60:01:79:d7:6b:02:78: 89:bb:43:92:18:07:b8:95:4c:53:49:c2:80:62:2c: 63:bb:88:45:4f:7e:a7:e4:c4:fb:7c:3b:ca:cf:2e: 7f:ea:04:fc:f1:43:72:92:04:f3:d2:08:ef:6f:e3: 71:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FC:86:10:7B:3E:A7:B2:40:EE:1A:6E:3F:85:0F:DB:C9:7B:A4:B7 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0d:fd:08:9c:44:a5:2a:f1:00:06:13:1e:aa:06:09:4b:1e: 6a:d4:44:a0:3e:d2:aa:ee:6f:f0:20:af:71:18:c3:65:14:c4: e3:f3:f8:60:ba:5f:b1:e8:4c:09:69:6f:49:e6:4a:af:24:a3: bf:13:d1:24:73:45:15:0e:3a:f6:ee:37:c3:8c:6b:fe:6c:30: d4:c7:f1:40:bf:c1:6d:f8:e8:6f:e0:c6:25:55:50:67:82:7c: 7c:e2:23:56:13:33:d3:3e:f5:4c:aa:c2:6c:5f:e5:2e:4e:ea: c3:fb:96:4b:62:33:2a:02:82:ba:b2:84:09:db:28:44:7e:64: b5:21:86:55:a1:e8:9b:e8:62:27:c8:89:8b:50:f0:a3:cf:66: d7:ac:8f:00:2f:94:10:31:59:ab:92:de:b2:d0:8c:9d:d2:70: db:bb:0e:0f:3f:bb:ca:4b:13:05:97:80:6c:af:af:8a:a0:8b: 9b:2d:5c:ff:c5:4c:0a:1e:21:ae:a1:ee:c4:c2:f3:a9:15:6f: a1:08:d0:f6:75:63:e3:10:41:2f:c2:bb:87:38:62:0c:8f:46: 69:36:ba:99:d3:59:b5:1e:30:e1:8d:11:84:e9:ff:7b:4d:6d: 8e:84:8f:a1:41:89:b7:bc:0d:4b:2c:91:7b:cc:cc:b5:52:84: f2:11:61:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUxMjIyMjMyNjQyWhcNMjUxMjI5MjMyNjQyWjAYMRYwFAYD VQQDDA02OTQ5ZDNiMy03MGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqxdtw2Q9+vb4XJF/DInZXwHFVlcnRA9h1KP7gc+VbMhLydTruFUrmpEeorg gX1O5eUxeJJbDKuxbE+SD6+jH7/3O5Blc0Th6eLEHZ6ccye7zYhLFc3/vQ/fVzd/ BRlpEqDIm9SG+q8UmwM2xpwuQFLbkufxt1BqlS9HG4pzSRH60lqsdOSU7aCIYmrU scC+pLW84lbfEjrt7WElIv7Iw3wM0jdxnknlpIog7VWyjLBkHUbU/Ka8u9KRQkwe mFHgAE14IUW7EQJ5LWABeddrAniJu0OSGAe4lUxTScKAYixju4hFT36n5MT7fDvK zy5/6gT88UNykgTz0gjvb+NxOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK38hhB7 PqeyQO4abj+FD9vJe6S3MB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPDf0InESlKvEABhMeqgYJSx5q1ESgPtKq7m/wIK9xGMNlFMTj8/hg ul+x6EwJaW9J5kqvJKO/E9Ekc0UVDjr27jfDjGv+bDDUx/FAv8Ft+Ohv4MYlVVBn gnx84iNWEzPTPvVMqsJsX+UuTurD+5ZLYjMqAoK6soQJ2yhEfmS1IYZVoeib6GIn yImLUPCjz2bXrI8AL5QQMVmrkt6y0Iyd0nDbuw4PP7vKSxMFl4Bsr6+KoIubLVz/ xUwKHiGuoe7EwvOpFW+hCND2dWPjEEEvwruHOGIMj0ZpNrqZ01m1HjDhjRGE6f97 TW2OhI+hQYm3vA1LLJF7zMy1UoTyEWFF -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:35 2025 by rpki-client